Your acquirer holds two numbers on you, and since April 2026 they no longer move together. Mastercard’s Excessive Chargeback Program counts chargebacks against last month’s sales. Visa’s VAMP counts fraud reports plus disputes against this month’s settled transactions. A merchant can sit comfortably under one line while breaching the other, which is why “our chargeback ratio is fine” has stopped being a useful sentence.
This guide covers what ECP actually measures, what the ECM and HECM tiers cost, how the fine ladder really counts months, and what it takes to get out. It also covers where Mastercard’s published rulebook stops short, because the thresholds every merchant quotes do not appear in it.
Two networks, two numbers. ECP counts chargebacks only. VAMP counts fraud reports plus disputes. A clean number on one network says nothing about the other.
The denominator is last month. Mastercard divides this month’s chargebacks by the preceding month’s transactions, so volume changes move your ratio before your disputes do.
The counter is cumulative, not consecutive. Violation months stack even with clean months in between, and six of them can put your acquirer under review.
Exit takes three consecutive clean months. Clear that bar and the fine ladder resets to first time noncompliance.
What ECP Measures, and Where the Thresholds Actually Live
Mastercard states the program’s purpose plainly. ECP exists so that each acquirer “closely monitors, on an ongoing basis, its chargeback performance at the Merchant level,” and so Mastercard can determine promptly when a merchant has exceeded monthly thresholds. Enforcement runs through the acquirer, not you. Mastercard assesses the acquirer, and your contract decides how much of that reaches your account.
Identification happens at the merchant ID level, using the acquirer assigned MID carried in DE 42 of the clearing message. That detail matters more than it sounds. A business running several MIDs is measured several times over, and one bad descriptor or one bad traffic source can put a single MID in the program while the rest of the estate looks healthy.
Here is the part almost no one writes down. Mastercard’s public rulebook does not contain the thresholds. Section 8.3.1 defines an ECM and an HECM purely by cross reference, as a merchant identified as noncompliant in the relevant category of “the Excessive Chargeback Merchant edit (Edit 2)” described in the Data Integrity Monitoring Program manual, which sits behind Mastercard Connect. The public document carries the definitions, the issuer recovery mechanics and the escalation triggers. It carries no numbers. Every threshold in circulation, including the ones below, reaches merchants through acquirers republishing a gated manual.
At a glance
- Program
- Excessive Chargeback Program (ECP)
- Measured on
- Acquirer assigned MID (DE 42)
- Tiers
- Excessive Chargeback Merchant (ECM), High Excessive Chargeback Merchant (HECM)
- Unit
- Basis points, chargebacks divided by preceding month transactions
- Assessed against
- The acquirer
- Thresholds published in
- Data Integrity Monitoring Program manual, Mastercard Connect only
Visa and Mastercard No Longer Measure the Same Thing
Before April 2025 the two programs at least rhymed. Both counted disputes, both worked off a monthly ratio. Then Visa retired VDMP and VFMP and folded fraud and disputes into one number. The result is that the two networks now measure structurally different things, and the similar sounding percentages hide it.
| Dimension | Mastercard ECP | Visa VAMP |
|---|---|---|
| What the numerator counts | Chargebacks only | TC40 fraud reports plus TC15 disputes |
| Denominator | Transactions in the preceding month | Settled transactions in the same month |
| Transaction scope | Mastercard transactions | Card not present only |
| Merchant entry line | 150 basis points and 100 chargebacks | 1.5% and 1,500 events |
| Assessed against | The acquirer | The acquirer, routinely passed through |
Sources: Mastercard Security Rules and Procedures and our VAMP guide.
Read down that table and the exposure becomes obvious. A merchant with heavy card testing and issuer reported fraud that never converts into chargebacks can be flagged Excessive on VAMP while ECP sees nothing worth reporting. A card present retailer with a dispute problem is invisible to VAMP entirely and fully exposed on ECP. And because Mastercard looks backward for its denominator while Visa looks at the current month, the same trading pattern produces different ratios on the two networks in the same month.
The number you are watching
Most processor dashboards show a single chargeback ratio, computed against current month volume. That figure matches neither program. It is not Mastercard’s basis points, because the denominator is wrong, and it is not your VAMP ratio, because the numerator is missing every TC40 fraud report. If you are managing to your dashboard, you are managing to a third number that nobody enforces.
The Basis Point Math Punishes the Month After You Comply
- Basis points
- Mastercard’s unit of measure for ECP. The number of chargebacks received for a merchant in a calendar month, divided by the number of Mastercard transactions in the preceding month, multiplied by 10,000. One hundred basis points equals one percent.
That preceding month denominator is the whole game, and it produces a trap that catches merchants at their most vulnerable moment.
| Tier | Chargebacks in the month | Basis points | Chargeback to transaction ratio |
|---|---|---|---|
| ECM | 100 to 299 | 150 to 299 | 1.50% to 2.99% |
| HECM | 300 or more | 300 or more | 3.00% or higher |
Source: JPMorgan Merchant Services, Mastercard Excessive Chargeback Program guide.
Picture a merchant that trips the ECM line and does exactly what its acquirer asks. Volume gets capped, hard, from 20,000 transactions a month down to 12,000. The trouble is that chargebacks arrive on a delay of weeks to months, so next month’s chargeback count still reflects the old, larger trading months. The numerator barely moves. The denominator, which is now the capped month, drops by 40%.
The merchant complied, sales fell, and the ratio went up. Seasonal traders meet the same mechanic without any intervention at all. The month after a peak unwinds, chargebacks from the peak are still landing while the denominator has already reverted to a normal month. This is why a January ECP notice is so common for merchants who had a strong Black Friday, and why the trajectory is readable well before the notice arrives.
Cutting volume is the one remediation every acquirer asks for first, and mechanically it makes next month’s Mastercard ratio worse.
TPE analysis
The practical answer is to fix the numerator inside the month rather than shrink the denominator. Alerts and deflection tools resolve disputes before they become chargebacks, which is the only lever that moves the number in the direction and on the timeline ECP measures.
The Fine Ladder Counts Months, Not Consecutive Months
Assessments start in your second violation month and climb with time served. Note the fourth column: once you pass three months, Mastercard also collects an issuer recovery assessment, charged at EUR or USD 5 for every chargeback above 300 in the month.
| Months above ECM threshold | ECM assessment | HECM assessment | Issuer recovery |
|---|---|---|---|
| 1 | 0 | 0 | No |
| 2 | 1,000 | 1,000 | No |
| 3 | 1,000 | 2,000 | No |
| 4 to 6 | 5,000 | 10,000 | Yes |
| 7 to 11 | 25,000 | 50,000 | Yes |
| 12 to 18 | 50,000 | 100,000 | Yes |
| 19 or more | 100,000 | 200,000 | Yes |
Source: JPMorgan Merchant Services. Mastercard does not publish this schedule in its public rulebook.
Now the detail that most coverage gets wrong. Those months do not have to be consecutive. The worked example in JPMorgan’s own program guide shows a merchant identified in January as month one, clean in February, then identified again in March and charged as month two. Mastercard’s rulebook uses the same logic for its escalation trigger, referring to a merchant that has been an ECM or HECM for six months “whether consecutive or non-consecutive.”
A merchant oscillating in and out of the program every other month therefore climbs the ladder at full speed while never once appearing in it twice in a row. At six months, consecutive or not, Mastercard may direct your acquirer’s action plan or require the acquirer to undergo a Franchise Management Program Customer Risk Review at the acquirer’s own expense. That is the point where your account stops being a chargeback problem and becomes a cost your acquirer can measure.
Getting Out Takes Three Consecutive Clean Months
There is one exit and no appeal to it. The MID has to sit below the ECM threshold for three consecutive months, at which point Mastercard removes the status automatically and any future identification is treated as first time noncompliance. Consecutive is doing real work in that sentence: a single breach in month three restarts the count.
- Get the right denominator.Compute basis points the way Mastercard does, against last month’s transaction count, so your internal number matches the one your acquirer is being assessed on.
- Deflect inside the month.Ethoca alerts and Rapid Dispute Resolution stop disputes before they become chargebacks, which is the only exclusion that helps a count based program.
- Protect the denominator.Resist blanket volume cuts and target the traffic sources actually generating disputes, or the ratio will climb while sales fall.
- Fix descriptors and cancellation flows.The cheapest chargeback is the one the cardholder never files because they recognised the billing line.
- Watch every MID separately.Program status attaches to the MID, so an estate average tells you nothing about your exposure.
- Track the Visa number in parallel.Winning on ECP while your VAMP ratio drifts up simply relocates the problem.
MATCH Code 04 Is a Separate and Lower Bar
Merchants tend to assume MATCH is what happens at the end of a long ECP run. It is not connected in that way, and the MATCH test is easier to fail. Reason code 04, Excessive Chargebacks, applies where a merchant’s Mastercard chargebacks aggregated over the previous three months exceeded 1.5% of its Mastercard sales transactions in that month and totalled at least USD 5,000.
There is no 100 chargeback floor in that test. A smaller merchant that never qualifies for ECM identification can still meet the MATCH standard, and a MATCH listing does considerably more damage than an assessment, because it follows you to every acquirer for five years. The offence and the record are different instruments, which is a distinction worth understanding before you need it.
FAQ
What is the Mastercard excessive chargeback threshold?
An ECM is identified at 150 basis points, a 1.50% chargeback to transaction ratio, together with at least 100 chargebacks in the month. HECM sits at 300 basis points and 300 chargebacks. Both figures come from acquirer published guides, since Mastercard’s public rulebook defers to a manual available only on Mastercard Connect.
Is the Mastercard chargeback ratio calculated on the same month?
No. Mastercard divides chargebacks received in a calendar month by transactions from the preceding month. Visa’s VAMP ratio uses settled transactions from the same month, so the two ratios diverge whenever your volume changes.
Does winning a representment remove a chargeback from my ECP ratio?
No. The chargeback counted when it was received. Representment recovers the money, not the ratio, which is why pre dispute deflection and evidence led exclusions matter more than dispute win rates for program purposes.
How long does it take to exit the Excessive Chargeback Program?
Three consecutive months below the ECM threshold. The status then resets and any later identification starts again at month one.
- Mastercard, “Security Rules and Procedures, Merchant Edition,” manual PDF, 4 August 2026, section 8.3 and Table 11.4.
- JPMorgan Merchant Services, “Mastercard Excessive Chargeback Program Guide,” program guide PDF.
- Visa, “Visa Acquirer Monitoring Program Overview,” fact sheet PDF, 2025.
- Mastercard, “Excessive Chargeback Program,” eLearning module.
